Configuring data transfer using IEC 60870-5-104 protocol via the Console

To configure data transfer via the IEC 60870-5-104 protocol using the Kaspersky Security Gateway Console:

1. In the Start menu of Microsoft Windows select All applications > Kaspersky Security Gateway > Kaspersky Security Gateway Console.

   The Kaspersky Security Gateway window opens.

   You can also open the Console by clicking the Kaspersky Security Gateway option in the menu of the Kaspersky Security Gateway Tray Icon.

2. In the Kaspersky Security Gateway node select the IEC 60870-5-104 child node.
3. Under Data transmission settings on the results pane, click Change link.

   The Settings window opens.

4. Under Transmission settings, clear or select the Enable data transmission check box.
   

   If the check box is selected, Kaspersky Industrial CyberSecurity for Nodes transmits the protection status of industrial network nodes from Kaspersky Security Center to the SCADA system.

   If the check box is cleared, no data is transmitted.

   By default, the check box is cleared.

5. Under Connection Settings, configure the following:
   • Device address. An additional address assigned to the computer in the SCADA system. Range of possible values: 0–65535.
   • Device port. A port number for establishing a connection to the SCADA system. Range of possible values: 0–65535.
   • TCP connection timeout. The value is specified in seconds. Range of possible values: 1–255.
   • Message send timeout. The value is specified in seconds. Range of possible values: 1–255.
   • Message confirmation timeout. The value is specified in seconds. Range of possible values: 1–255.
   • Test connection timeout. The value is specified in seconds. Range of possible values: 1–255.
   • Maximum unconfirmed sent messages allowed. Range of possible values: 1–32767.
   • Maximum unconfirmed received messages allowed. Range of possible values: 1–32767.
6. Click the OK button.
7. Under Monitored values on the results pane, click Change link.

   A Monitored values settings window opens. The list displays tracked data added automatically after connecting to a data source, such as Kaspersky Security Center and/or Kaspersky Industrial CyberSecurity for Networks.

8. By selecting the check box next to the tracked data name, you can enable or disable tracking. If tracking is disabled, data will not be transmitted to the SCADA system.
9. If required, edit or add a service tag in the Service tag column. You can use the service tag to filter data received in the SCADA system. The tag may consist of numbers only.
10. Click the OK button.

The new configuration is saved.

Page top